Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2026-21712

Опубликовано: 30 мар. 2026
Источник: nvd
CVSS3: 5.7
CVSS3: 6.5
EPSS Низкий

Описание

A flaw in Node.js URL processing causes an assertion failure in native code when url.format() is called with a malformed internationalized domain name (IDN) containing invalid characters, crashing the Node.js process.

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:nodejs:node.js:*:*:*:*:-:*:*:*
Версия от 24.0.0 (включая) до 24.14.0 (включая)
cpe:2.3:a:nodejs:node.js:*:*:*:*:-:*:*:*
Версия от 25.0.0 (включая) до 25.8.1 (включая)

EPSS

Процентиль: 27%
0.00332
Низкий

5.7 Medium

CVSS3

6.5 Medium

CVSS3

Дефекты

CWE-20

Связанные уязвимости

CVSS3: 6.5
ubuntu
7 месяцев назад

A flaw in Node.js URL processing causes an assertion failure in native code when `url.format()` is called with a malformed internationalized domain name (IDN) containing invalid characters, crashing the Node.js process.

CVSS3: 6.5
redhat
7 месяцев назад

A flaw in Node.js URL processing causes an assertion failure in native code when `url.format()` is called with a malformed internationalized domain name (IDN) containing invalid characters, crashing the Node.js process.

CVSS3: 5.7
msrc
7 месяцев назад

A flaw in Node.js URL processing causes an assertion failure in native code when `url.format()` is called with a malformed internationalized domain name (IDN) containing invalid characters, crashing the Node.js process.

CVSS3: 6.5
debian
7 месяцев назад

A flaw in Node.js URL processing causes an assertion failure in native ...

CVSS3: 5.7
github
7 месяцев назад

A flaw in Node.js URL processing causes an assertion failure in native code when `url.format()` is called with a malformed internationalized domain name (IDN) containing invalid characters, crashing the Node.js process.

EPSS

Процентиль: 27%
0.00332
Низкий

5.7 Medium

CVSS3

6.5 Medium

CVSS3

Дефекты

CWE-20